🧾 Morning digest: WLD -13%, Novatech faces $1.37B, market stuck in neutral
BTC is at $80,859.01, down 1.15% over 24 hours, and ETH is at $2,381.38, down 0.87%. Fear & Greed sits at 51 (Neutral), up from 50 yesterday, so nobody is panicking and nobody is partying.
▪️ BMT is the day's top gainer at +29.0% on $34M volume. The feed doesn't say why it ran, so treat it as a pump until proven otherwise.
▪️ WLD is the worst loser at -13.0% on $72M volume. NEAR fell -6.7% on $108M and ZEC -4.7% on $176M, the heaviest volume on the board.
▪️ Colombian crypto broker Leonardo de Jesus Zuluaga Duque got 160 months in a New York federal court for laundering drug money through Tether and US shell companies, plus forfeiture of $14,751,846.
▪️ Initia Chain was hit when an attacker minted tokens and cashed out about $2.6M. Sources say the exploit raises concerns about the chain's security and could weigh on future investment.
▪️ New York wants about $1.37B from Novatech founders Cynthia and Eddy Petion after a default judgment. Investors deposited more than $1.16B, but only about $26M reached the platform used for trading.
📊 BTC 24h:
📊 ETH 24h:
📊 Fear & Greed:
🔮Neutral sentiment with BTC bleeding: nobody is panicking yet, which is when the wrong trade gets made.
@hivenetwork
BTC is at $80,859.01, down 1.15% over 24 hours, and ETH is at $2,381.38, down 0.87%. Fear & Greed sits at 51 (Neutral), up from 50 yesterday, so nobody is panicking and nobody is partying.
▪️ BMT is the day's top gainer at +29.0% on $34M volume. The feed doesn't say why it ran, so treat it as a pump until proven otherwise.
▪️ WLD is the worst loser at -13.0% on $72M volume. NEAR fell -6.7% on $108M and ZEC -4.7% on $176M, the heaviest volume on the board.
▪️ Colombian crypto broker Leonardo de Jesus Zuluaga Duque got 160 months in a New York federal court for laundering drug money through Tether and US shell companies, plus forfeiture of $14,751,846.
▪️ Initia Chain was hit when an attacker minted tokens and cashed out about $2.6M. Sources say the exploit raises concerns about the chain's security and could weigh on future investment.
▪️ New York wants about $1.37B from Novatech founders Cynthia and Eddy Petion after a default judgment. Investors deposited more than $1.16B, but only about $26M reached the platform used for trading.
📊 BTC 24h:
$80,859.01 (-1.15%)📊 ETH 24h:
$2,381.38 (-0.87%)📊 Fear & Greed:
51 (Neutral)A 51 reading means no fear and no greed, which is exactly when chop eats leveraged longs and shorts alike. WLD's -13% on $72M is the one to watch, since the feed gives no reason for it. The Novatech numbers are the lesson for anyone trusting a platform: $1.16B came in and about $26M reached the trading side.
🔮
@hivenetwork
🚨 UAE-led sting flags $39B in crypto fraud assets, 960 arrests claimed
A three-month operation led by the UAE, with 30 countries and 13 private partners, raided 29 fraud centers and flagged over $39 billion in fraud-linked digital assets. The headline says 960 arrests, but the same wire's body says nearly 100 defendants, so the arrest count is shaky. Interpol and GASA were in on it, and so were Huawei, Mastercard and Meta.
▪️ Operation Confrontation Ghost ran for three months and hit groups behind AI-enabled fraud, financial scams through digital platforms and online sextortion.
▪️ Police blocked 4,000+ bank accounts and shut down 570 social media accounts tied to the schemes. Nothing says how the accounts were linked, only that they were.
▪️ Identified: 3,500 suspects and 15,000 victims. Thwarted: over 123.71 million online fraud attempts.
▪️ The $39B in fraud-linked assets is described as already being seized and recovered. The wire doesn't say how much of it has actually been seized.
▪️ Tokenized assets were used to secure $12B in financial transactions, which the Ministry says reduces financial risk.
▪️ Context: in September the UAE and Sweden took down a gang that laundered illicit funds through crypto and had links to contract hits.
📊 Fraud-linked assets identified:
📊 Fraud attempts thwarted:
📊 Bank accounts blocked:
📊 Fraud centers raided:
💬 «the growing use of digital technologies and artificial intelligence in fraud, alongside the exploitation of digital platforms, bank accounts and cryptocurrencies to transfer funds and conceal their origins, requires continued improvements in countermeasures and stronger international coordination…» — Dr. Monica Kathina Juma, Executive Director of UNODC
🔮$39B 'identified' is not $39B seized. When do the actual numbers show up?
@hivenetwork
A three-month operation led by the UAE, with 30 countries and 13 private partners, raided 29 fraud centers and flagged over $39 billion in fraud-linked digital assets. The headline says 960 arrests, but the same wire's body says nearly 100 defendants, so the arrest count is shaky. Interpol and GASA were in on it, and so were Huawei, Mastercard and Meta.
▪️ Operation Confrontation Ghost ran for three months and hit groups behind AI-enabled fraud, financial scams through digital platforms and online sextortion.
▪️ Police blocked 4,000+ bank accounts and shut down 570 social media accounts tied to the schemes. Nothing says how the accounts were linked, only that they were.
▪️ Identified: 3,500 suspects and 15,000 victims. Thwarted: over 123.71 million online fraud attempts.
▪️ The $39B in fraud-linked assets is described as already being seized and recovered. The wire doesn't say how much of it has actually been seized.
▪️ Tokenized assets were used to secure $12B in financial transactions, which the Ministry says reduces financial risk.
▪️ Context: in September the UAE and Sweden took down a gang that laundered illicit funds through crypto and had links to contract hits.
📊 Fraud-linked assets identified:
$39B📊 Fraud attempts thwarted:
123.71M📊 Bank accounts blocked:
4,000+📊 Fraud centers raided:
29Retail is the one getting hit, and the reader should watch the gap between 'identified' and 'seized' before anyone cheers. The list of partners reads like a PR roster: Meta and TikTok are on it, and they're the platforms where these scams run. The headline's 960 arrests doesn't match the body's nearly 100 defendants, so the scale of the crackdown is still unclear.
💬 «the growing use of digital technologies and artificial intelligence in fraud, alongside the exploitation of digital platforms, bank accounts and cryptocurrencies to transfer funds and conceal their origins, requires continued improvements in countermeasures and stronger international coordination…» — Dr. Monica Kathina Juma, Executive Director of UNODC
🔮
@hivenetwork
🚨 Interpol: 1,462 arrests across Africa, $105M clawed back from crypto launderers
Interpol's Operation Serengeti III ran from June 29 to Aug. 31 across 20 African countries plus the United States and ended with 1,462 arrests and more than $105M recovered. The juicy part for us: a Nigerian case traced over $2.4M in investment-fraud proceeds, much of it washed through crypto.
▪️ Targets: online fraud, digital extortion, ransomware and business email compromise. Interpol announced the results on Oct. 22.
▪️ Uganda: two transnational fraud rings dismantled, 365 foreign nationals arrested. Victims were pensioners across Asia, hit with scripted calls, fake trading platforms and fraudulent websites selling…
▪️ Nigeria, investment scam: the pitch ran through messaging apps, the money went through crypto transactions, one suspect arrested.
▪️ Nigeria, phishing: a suspect harvested software credentials and amassed about 2.1M email addresses. Investigators recovered a luxury car bought with the proceeds.
▪️ Angola: nine arrested, 2,000+ mining devices seized at two illegal crypto mining centers, six illegal power transformation stations confiscated. The electrical kit alone was worth over $1M.
▪️ Angola banned crypto mining after the National Assembly approved it in December 2023 (energy security, environment, monetary sovereignty). The ban took effect in 2024.
📊 Losses tied to the cases:
📊 Victims recorded:
📊 Malicious networks disrupted:
📊 Email addresses harvested in one Nigerian case:
🔮Pensioners got the scripted call. Your 'guaranteed returns' group is the same script with a nicer avatar.
@hivenetwork
Interpol's Operation Serengeti III ran from June 29 to Aug. 31 across 20 African countries plus the United States and ended with 1,462 arrests and more than $105M recovered. The juicy part for us: a Nigerian case traced over $2.4M in investment-fraud proceeds, much of it washed through crypto.
▪️ Targets: online fraud, digital extortion, ransomware and business email compromise. Interpol announced the results on Oct. 22.
▪️ Uganda: two transnational fraud rings dismantled, 365 foreign nationals arrested. Victims were pensioners across Asia, hit with scripted calls, fake trading platforms and fraudulent websites selling…
▪️ Nigeria, investment scam: the pitch ran through messaging apps, the money went through crypto transactions, one suspect arrested.
▪️ Nigeria, phishing: a suspect harvested software credentials and amassed about 2.1M email addresses. Investigators recovered a luxury car bought with the proceeds.
▪️ Angola: nine arrested, 2,000+ mining devices seized at two illegal crypto mining centers, six illegal power transformation stations confiscated. The electrical kit alone was worth over $1M.
▪️ Angola banned crypto mining after the National Assembly approved it in December 2023 (energy security, environment, monetary sovereignty). The ban took effect in 2024.
📊 Losses tied to the cases:
$385M+📊 Victims recorded:
65,929📊 Malicious networks disrupted:
10,909📊 Email addresses harvested in one Nigerian case:
2.1MIf a 'trading mentor' with green screenshots has ever slid into your DMs, this is your category: fake platforms, scripted callers, a chat full of guaranteed returns. Same product, different logo. Interpol raids don't move price, so nobody is pumping anything here. Several investigations are still active, officials are tracing more proceeds, and the Tanzania, Gabon and Republic of Congo cases are not closed.
🔮
@hivenetwork
🚨 X 100 Global: hijacked Senate, drained treasury, X token down 96%
Ethereum-based X 100 Global lost about $4.85M in USDT on Oct. 24 after attackers took control of its governance. They borrowed roughly 1.94M USDT through an Aave flash loan, bought X tokens and used them to seat helper contracts in two of the project's three Senate seats. Blockaid traced the proceeds, and the X token collapsed.
▪️ No code bug here. The attack hit the governance design: a three-seat Senate that could be bought with a flash loan.
▪️ Governance had no voting snapshots, no minimum holding period and no execution delay. Whoever bought the majority could pass proposals and execute them immediately.
▪️ One transaction moved 400,000 X from the Freezer treasury into an attacker-controlled liquidity pool and sent about 36 USDT back to the treasury.
▪️ The attackers pulled those tokens out and sold them through a legitimate Uniswap V3 pool. Across three transactions about 550,000 X were extracted.
▪️ Follow-up operations targeted more Uniswap V3 liquidity positions. In some DEX pools, liquidity fell to just a few dollars.
▪️ X went from the $50-60 range to about $1.75. Anyone trying to exit a size position hit extreme slippage.
📊 Stolen in USDT:
📊 Flash loan from Aave:
📊 X tokens extracted:
📊 X still in Freezer at last update:
🔮Three seats, one flash loan, and the treasury was for sale. Who's next with the same governance setup?
@hivenetwork
Ethereum-based X 100 Global lost about $4.85M in USDT on Oct. 24 after attackers took control of its governance. They borrowed roughly 1.94M USDT through an Aave flash loan, bought X tokens and used them to seat helper contracts in two of the project's three Senate seats. Blockaid traced the proceeds, and the X token collapsed.
▪️ No code bug here. The attack hit the governance design: a three-seat Senate that could be bought with a flash loan.
▪️ Governance had no voting snapshots, no minimum holding period and no execution delay. Whoever bought the majority could pass proposals and execute them immediately.
▪️ One transaction moved 400,000 X from the Freezer treasury into an attacker-controlled liquidity pool and sent about 36 USDT back to the treasury.
▪️ The attackers pulled those tokens out and sold them through a legitimate Uniswap V3 pool. Across three transactions about 550,000 X were extracted.
▪️ Follow-up operations targeted more Uniswap V3 liquidity positions. In some DEX pools, liquidity fell to just a few dollars.
▪️ X went from the $50-60 range to about $1.75. Anyone trying to exit a size position hit extreme slippage.
📊 Stolen in USDT:
$4.85M📊 Flash loan from Aave:
1.94M USDT📊 X tokens extracted:
550,000📊 X still in Freezer at last update:
12.2MIf you're holding X, you're holding a token with almost no liquidity and a treasury that's still half-loaded. The 12.2M X left in the Freezer are the obvious next target, so the story isn't over. X 100 Global hadn't issued an official statement at the time of writing, which is the classic silence before a 'we're investigating' post. The lesson for every DAO-style project is simple: if a few seats can be bought in one block, the treasury is a yard sale.
🔮
@hivenetwork
📊 BTC flat at $80.9K, but BMT just got cut 14% on $43M volume
BTC is parked at $80,912 (+0.08% in 24h) and ETH sits at $2,366.83 (-0.62%), so the majors are doing absolutely nothing. The real action is in the alts, and the crowd is still ignoring the three stories below.
▪️ Gainers: ZEC leads at +3.8% on $141M volume, the only big green move with real money behind it. XRP +1.4% ($102M) and BNB +1.0% ($95M) trail it.
▪️ Losers: BMT is the day's bloodbath at -14.2% on $43M volume. The digest doesn't say why, so treat it as a falling knife until someone explains it.
▪️ AI -4.0% on $76M and NEAR -3.3% on $116M are bleeding on serious volume, not thin chop. SUI -3.2% and LINK -2.5% round out the red list.
▪️ X 100 Global: attackers captured two of the three Senate seats that control the project on Saturday, then used the majority to drain the treasury.
▪️ Blockaid traced about $4.85M in USDT plus other token withdrawals. The X token fell more than 96% as liquidity vanished.
▪️ UAE-led coalition: three-month op with 30 countries and 13 private partners, including Huawei, Mastercard and Meta. Raided 29 fraud centers, flagged $39B in fraud-linked assets.
📊 Fear & Greed:
🔮Flat majors, a 14% alt crater, and a crowd just warm enough to get greedy. Who's the exit liquidity today?
@hivenetwork
BTC is parked at $80,912 (+0.08% in 24h) and ETH sits at $2,366.83 (-0.62%), so the majors are doing absolutely nothing. The real action is in the alts, and the crowd is still ignoring the three stories below.
▪️ Gainers: ZEC leads at +3.8% on $141M volume, the only big green move with real money behind it. XRP +1.4% ($102M) and BNB +1.0% ($95M) trail it.
▪️ Losers: BMT is the day's bloodbath at -14.2% on $43M volume. The digest doesn't say why, so treat it as a falling knife until someone explains it.
▪️ AI -4.0% on $76M and NEAR -3.3% on $116M are bleeding on serious volume, not thin chop. SUI -3.2% and LINK -2.5% round out the red list.
▪️ X 100 Global: attackers captured two of the three Senate seats that control the project on Saturday, then used the majority to drain the treasury.
▪️ Blockaid traced about $4.85M in USDT plus other token withdrawals. The X token fell more than 96% as liquidity vanished.
▪️ UAE-led coalition: three-month op with 30 countries and 13 private partners, including Huawei, Mastercard and Meta. Raided 29 fraud centers, flagged $39B in fraud-linked assets.
📊 Fear & Greed:
54 (Neutral), was 51 yesterdayFear & Greed at 54 is neutral and creeping up, so the crowd is warming up, not panicking. Flat majors plus a 14% alt crater means the day's damage is concentrated in names with thin conviction, and that's where people get shredded. Anyone holding X 100 Global or the BMT/AI/NEAR names should expect volatility to stay ugly, since the source gives no recovery plan for X.
🔮
@hivenetwork
🚨 Chinese national extradited over $36.9M fake-exchange crypto scam, 174 Americans hit
The US just pulled Zheng Zhao, 44, out of the Netherlands and arraigned him in California over a crypto investment scam that pushed more than $36.9M through offshore banks and wallets. The victims were 174 Americans. The pitch was a 'trading platform' that looked like a real exchange, while the balances on screen climbed and the actual money walked out the back door.
▪️ The approach: unsolicited social media messages, calls, texts and online dating. Trust first, then 'digital asset' investments on fake platforms built to look like legit exchanges.
▪️ Victims were told their balances were growing. Meanwhile the money went through US shell companies, international bank accounts and digital asset wallets.
▪️ The hub: over $36.9M landed in one account at Deltec Bank in the Bahamas. It was converted into USDT and sent to a wallet in Cambodia.
▪️ From the Cambodian wallet, the USDT went to regional scam center leaders. The whole operation ran out of Cambodian scam centers.
▪️ Zhao's charge is money laundering conspiracy from August 2025, up to 20 years. Eight co-conspirators already pleaded guilty.
▪️ ShengSheng He got 51 months and Jingliang Su got 46 months for running an unlicensed money transmitting business.
📊 Moved through the scheme:
📊 American victims:
📊 Max sentence for Zhao:
📊 Co-conspirators who pleaded guilty:
💬 «This extradition should be a lesson to all those who seek to exploit vulnerable Americans from overseas.» — A. Tysen Duva, Assistant Attorney General, Criminal Division
🔮Green numbers on a fake exchange. Oldest trick in the book, just with a Bahamas account attached.
@hivenetwork
The US just pulled Zheng Zhao, 44, out of the Netherlands and arraigned him in California over a crypto investment scam that pushed more than $36.9M through offshore banks and wallets. The victims were 174 Americans. The pitch was a 'trading platform' that looked like a real exchange, while the balances on screen climbed and the actual money walked out the back door.
▪️ The approach: unsolicited social media messages, calls, texts and online dating. Trust first, then 'digital asset' investments on fake platforms built to look like legit exchanges.
▪️ Victims were told their balances were growing. Meanwhile the money went through US shell companies, international bank accounts and digital asset wallets.
▪️ The hub: over $36.9M landed in one account at Deltec Bank in the Bahamas. It was converted into USDT and sent to a wallet in Cambodia.
▪️ From the Cambodian wallet, the USDT went to regional scam center leaders. The whole operation ran out of Cambodian scam centers.
▪️ Zhao's charge is money laundering conspiracy from August 2025, up to 20 years. Eight co-conspirators already pleaded guilty.
▪️ ShengSheng He got 51 months and Jingliang Su got 46 months for running an unlicensed money transmitting business.
📊 Moved through the scheme:
$36.9M+📊 American victims:
174📊 Max sentence for Zhao:
20 years📊 Co-conspirators who pleaded guilty:
8Same ecosystem as the Prince Group saga: its head Chen Zhi was sent to China in January, and associate Hu Shi was arrested in Osaka in June. The Scam Center Strike Force restrained about $52M in one day in the Xinbi Guarantee action, bringing its total to roughly $938M. The money trail here ran through USDT on public chains, which is the exact rail you use every day. Stablecoins are not invisible, and the feds have clearly learned to read them.
💬 «This extradition should be a lesson to all those who seek to exploit vulnerable Americans from overseas.» — A. Tysen Duva, Assistant Attorney General, Criminal Division
🔮
@hivenetwork
🔓 GMO's trading cloud gets cracked: 26,739 servers in the crosshairs
Japan's GMO Internet got hit where retail keeps its money: Onamae.com Desktop Cloud, the always-on box that runs FX bots, was breached. One account lost about 2.4 million yen in roughly 84 seconds, because the attackers were trading with stolen broker logins, not with anyone's strategy.
▪️ The product: always-on servers so MetaTrader 4 and MetaTrader 5 bots keep trading with your PC off. Handy, but it parked broker credentials inside an environment attackers could get into.
▪️ A customer inquiry tipped GMO off on Oct. 19. By Oct. 20, investigators had confirmed malware in customer server environments.
▪️ GMO then found its own security flaw, which allowed unauthorized access and removal of customer information.
▪️ Stolen trading credentials were used for unauthorized trades, with repeated orders draining one account in under a minute and a half.
▪️ The extortion: threats to hit customer accounts at 70+ domestic and foreign brokerages, leak the stolen data and launch more ransomware unless GMO paid.
▪️ Oct. 21, 4 a.m. Japan time: servers started going down and the whole service was taken offline. GMO refused to pay, citing no guarantee the data would vanish or the attacks would stop.
📊 Flat payout per Desktop Cloud customer:
📊 Brokerages threatened:
📊 Free access to alternative desktop platform:
🔮A cloud that keeps broker keys running 24/7 is a vault with the door off. Who's next?
@hivenetwork
Japan's GMO Internet got hit where retail keeps its money: Onamae.com Desktop Cloud, the always-on box that runs FX bots, was breached. One account lost about 2.4 million yen in roughly 84 seconds, because the attackers were trading with stolen broker logins, not with anyone's strategy.
▪️ The product: always-on servers so MetaTrader 4 and MetaTrader 5 bots keep trading with your PC off. Handy, but it parked broker credentials inside an environment attackers could get into.
▪️ A customer inquiry tipped GMO off on Oct. 19. By Oct. 20, investigators had confirmed malware in customer server environments.
▪️ GMO then found its own security flaw, which allowed unauthorized access and removal of customer information.
▪️ Stolen trading credentials were used for unauthorized trades, with repeated orders draining one account in under a minute and a half.
▪️ The extortion: threats to hit customer accounts at 70+ domestic and foreign brokerages, leak the stolen data and launch more ransomware unless GMO paid.
▪️ Oct. 21, 4 a.m. Japan time: servers started going down and the whole service was taken offline. GMO refused to pay, citing no guarantee the data would vanish or the attacks would stop.
📊 Flat payout per Desktop Cloud customer:
5,000 yen📊 Brokerages threatened:
70+📊 Free access to alternative desktop platform:
6 monthsYour broker login sat in the same room as the hacker. GMO will pay verified losses and fees, plus a flat 5,000 yen to every Desktop Cloud customer whether they lost money or not, which is a coffee for a robbed account. The service is offline, the investigation has no end date, and founder Masatoshi Kumagai is asking the government to step in under Japan's active cyber defense framework.
🔮
@hivenetwork
🐋 Arthur Hayes dumps $22.28M in altcoins and ETH right after calling for $10K ETH
Wallets linked to Arthur Hayes, ex-CEO of BitMEX, sold about $22.28M of altcoins and ETH in just days, per Lookonchain's on-chain data. The biggest hit was 6,400 ETH, worth roughly $15.2M. The guy who called ETH going to $10,000 by year-end is now the one hitting the bid.
▪️ Late September he said Ethereum is the most secure layer-one and can hold serious capital. Now the same wallets are selling it by the thousands.
▪️ Hayes runs the same loop every time: load up on ETH, get shaken out on a dip, sell, then buy back once price reclaims the level he dumped at.
▪️ July: he bought more than 7,200 ETH for nearly $14M at an average $1,923, then sent 2,364 ETH to Cumberland and Galaxy Digital at about $1,821, booking a loss of around $241K.
▪️ Earlier he sold over $10M of ETH below $1,700 and bought back after it recovered above $1,900. By late July he had added 3,915 ETH for $7.47M at $1,909.
▪️ Sales came during a week or so of market uncertainty, the same kind of stress window where he has dumped big size before.
📊 ENA sold (14M tokens):
📊 UNI sold (323,000):
📊 ETHFI sold (1.89M):
📊 AERO sold (546,609):
🔮Is the $10K ETH call still live, or is it just a better entry in his head?
@hivenetwork
Wallets linked to Arthur Hayes, ex-CEO of BitMEX, sold about $22.28M of altcoins and ETH in just days, per Lookonchain's on-chain data. The biggest hit was 6,400 ETH, worth roughly $15.2M. The guy who called ETH going to $10,000 by year-end is now the one hitting the bid.
▪️ Late September he said Ethereum is the most secure layer-one and can hold serious capital. Now the same wallets are selling it by the thousands.
▪️ Hayes runs the same loop every time: load up on ETH, get shaken out on a dip, sell, then buy back once price reclaims the level he dumped at.
▪️ July: he bought more than 7,200 ETH for nearly $14M at an average $1,923, then sent 2,364 ETH to Cumberland and Galaxy Digital at about $1,821, booking a loss of around $241K.
▪️ Earlier he sold over $10M of ETH below $1,700 and bought back after it recovered above $1,900. By late July he had added 3,915 ETH for $7.47M at $1,909.
▪️ Sales came during a week or so of market uncertainty, the same kind of stress window where he has dumped big size before.
📊 ENA sold (14M tokens):
$2.76M📊 UNI sold (323,000):
$2.24M📊 ETHFI sold (1.89M):
$1.23M📊 AERO sold (546,609):
$398KIf you're holding ETH because a famous name said $10K, the wallet doing the selling is the famous name. Hayes is publicly bullish while his own on-chain history shows him selling into weakness and buying back higher. Lookonchain shows what moved, not why, so read his track record as the only real guidance on offer. Anyone long the same altcoins he just unloaded is now the exit liquidity.
🔮
@hivenetwork
📉 BTC at $80,094 and $815M liquidated: longs got farmed overnight
BTC is at $80,094, down 1.02% over 24h, and ETH is at $2,322.78, down 1.87%. Over $815M in leveraged crypto positions got liquidated as both fell, so the longs who piled in on the way down paid for it.
▪️ ENA +6.4% on just $33M volume: top green on the board, but thin volume is exactly the candle that gets chased right before it gets dumped on the chasers.
▪️ WLD -4.6% on $30M: worst of the top losers. Watch it if BTC keeps bleeding, because the weak alts always go last and hardest.
▪️ ETH -1.9% on $338M: the heaviest volume among the losers, and the name the liquidations were pinned to.
▪️ Zheng Zhao, 44, extradited from the Netherlands to California: $36.9M crypto scam, 174 American victims, money routed via offshore banks and digital wallets.
▪️ GMO Internet cloud trading breached, up to 26,739 servers exposed: hackers hijacked brokerage accounts for unauthorized trades, then demanded money.
📊 Fear & Greed:
🔮Who is the exit liquidity this time: the longs who bought ENA's pump, or the ones who bought the BTC dip?
@hivenetwork
BTC is at $80,094, down 1.02% over 24h, and ETH is at $2,322.78, down 1.87%. Over $815M in leveraged crypto positions got liquidated as both fell, so the longs who piled in on the way down paid for it.
▪️ ENA +6.4% on just $33M volume: top green on the board, but thin volume is exactly the candle that gets chased right before it gets dumped on the chasers.
▪️ WLD -4.6% on $30M: worst of the top losers. Watch it if BTC keeps bleeding, because the weak alts always go last and hardest.
▪️ ETH -1.9% on $338M: the heaviest volume among the losers, and the name the liquidations were pinned to.
▪️ Zheng Zhao, 44, extradited from the Netherlands to California: $36.9M crypto scam, 174 American victims, money routed via offshore banks and digital wallets.
▪️ GMO Internet cloud trading breached, up to 26,739 servers exposed: hackers hijacked brokerage accounts for unauthorized trades, then demanded money.
📊 Fear & Greed:
50 (Neutral), yesterday 54CoinDCX confirmed a $16M loss from retired wallets after breach reports surfaced, with no attack vector or recovery details yet, so don't assume your old wallets are safe. Sentiment is slipping but not panicking, which means choppy price action with liquidation hunts around key levels, not a clean trend. Trade small and expect wicks.
🔮
@hivenetwork
🎤 Carti's dormant X account shills a memecoin, and it rugs within hours
Playboi Carti's X account, 3.6M followers and dead since early 2025, woke up late Sunday with a Pump.fun tag in the bio. A CARTI token ran to about $1.2M market value before it rugged, with $4.09M in 24h volume on the main Solana pair while the price fell roughly 64%. Nobody has linked the rapper or his team to it.
▪️ Bio edit tagging @pumpfun surfaced first via memecoin tracker Crypto Gorilla. No wallet, no contract address, no statement from Carti's side.
▪️ The hook was a screenshot: a token named "carti" under a playboicarti handle, up 18,535% in its first hour, market value near $714,600.
▪️ Crypto Gorilla's daily recap called it a hack. Traders didn't wait for confirmation and piled in anyway.
▪️ Most of the volume came in the first few hours. By Monday morning in Asia the market value was a small fraction of the peak.
▪️ Within a couple of hours, 20+ copycat CARTI tokens were deployed across Solana, Robinhood Chain and Arc. Most now trade for a few thousand dollars.
▪️ Zeru tracked 3,374 launches and only 34 graduated organically, about 1%. The top 10 Pump.fun deployers have pulled over $95.1M.
🔮Dormant account, one bio edit, instant pump. Hacked, or the cheapest marketing campaign of the year?
@hivenetwork
Playboi Carti's X account, 3.6M followers and dead since early 2025, woke up late Sunday with a Pump.fun tag in the bio. A CARTI token ran to about $1.2M market value before it rugged, with $4.09M in 24h volume on the main Solana pair while the price fell roughly 64%. Nobody has linked the rapper or his team to it.
▪️ Bio edit tagging @pumpfun surfaced first via memecoin tracker Crypto Gorilla. No wallet, no contract address, no statement from Carti's side.
▪️ The hook was a screenshot: a token named "carti" under a playboicarti handle, up 18,535% in its first hour, market value near $714,600.
▪️ Crypto Gorilla's daily recap called it a hack. Traders didn't wait for confirmation and piled in anyway.
▪️ Most of the volume came in the first few hours. By Monday morning in Asia the market value was a small fraction of the peak.
▪️ Within a couple of hours, 20+ copycat CARTI tokens were deployed across Solana, Robinhood Chain and Arc. Most now trade for a few thousand dollars.
▪️ Zeru tracked 3,374 launches and only 34 graduated organically, about 1%. The top 10 Pump.fun deployers have pulled over $95.1M.
If you touched any CARTI ticker this weekend, you were the exit liquidity. The copycats are the trap: deployers know celebrity search spikes, so they flood launchpads with lookalikes and hope you grab the wrong contract. This isn't new. In July, Robinhood CEO Vlad Tenev's account was hijacked to shill a fake "Vladhood" token, which pulled in 175,000+ views in under 20 minutes before users flagged it. The Kimchi saga went from Pump.fun star to rug suspect in 48 hours. Bitcoin slipped below $80,000 and speculative volume dried up, yet a celebrity name still found buyers. That tells you where the retail appetite is.
🔮
@hivenetwork
📊 Morning digest: dead-calm majors, SOXLB pumping on thin volume, and a wallet check that got robbed
BTC and ETH both slid under half a percent in 24h, so the majors are doing nothing worth your coffee. The money moved in small caps, and the newsroom's top stories show people getting robbed through boring plumbing.
▪️ SOXLB +6.9% on $28M and QNT +4.1% on $37M lead the green list. Thin volume pumps look great on a chart until you try to exit.
▪️ ZEC +1.6% on $160M is the big money in the green list, barely moving. Somebody is loading or dumping while everyone watches the top gainer.
▪️ CRCLB -4.8% on $28M is the worst loser. NEAR -1.9% on $91M and SOL -1.2% on $153M show heavy selling, where stops get hunted.
▪️ BloomTrading: custodial bot users lost nearly $1M as wallets were drained. Custodial means the bot held the keys, so you trusted the box.
▪️ CARTI: a Pump.fun link appeared on Playboi Carti's dormant X account. The token ran to about $1.2M, then rugged within hours with no wallet tied to the account.
▪️ Keystone: hackers first leaked customer info, then stole a key used to check wallet authenticity, so counterfeit wallets could pass verification.
📊 BTC:
📊 ETH:
🔮Neutral sentiment and thin-volume pumps: who is the exit liquidity this morning?
@hivenetwork
BTC and ETH both slid under half a percent in 24h, so the majors are doing nothing worth your coffee. The money moved in small caps, and the newsroom's top stories show people getting robbed through boring plumbing.
▪️ SOXLB +6.9% on $28M and QNT +4.1% on $37M lead the green list. Thin volume pumps look great on a chart until you try to exit.
▪️ ZEC +1.6% on $160M is the big money in the green list, barely moving. Somebody is loading or dumping while everyone watches the top gainer.
▪️ CRCLB -4.8% on $28M is the worst loser. NEAR -1.9% on $91M and SOL -1.2% on $153M show heavy selling, where stops get hunted.
▪️ BloomTrading: custodial bot users lost nearly $1M as wallets were drained. Custodial means the bot held the keys, so you trusted the box.
▪️ CARTI: a Pump.fun link appeared on Playboi Carti's dormant X account. The token ran to about $1.2M, then rugged within hours with no wallet tied to the account.
▪️ Keystone: hackers first leaked customer info, then stole a key used to check wallet authenticity, so counterfeit wallets could pass verification.
📊 BTC:
$79,848.01 (-0.36%)📊 ETH:
$2,317.08 (-0.33%)Fear & Greed sits at 48, Neutral, down from 50 yesterday. Nobody is panicking and nobody is euphoric, so a green candle today is just someone's exit at retail prices. If you use Keystone, treat any wallet verification as unproven until they close the hole.
🔮
@hivenetwork
🔐 Keystone lost the key that proves its wallets are real. Fakes can now pass
Hardware wallet maker Keystone sold you a 'cold' box and a promise of authenticity, and now the promise is in a hacker's pocket. The attacker who breached its website last week took the key used to verify devices, plus 25,964 buyer records from 2024 to 2026, after first calling it just a customer data leak. Counterfeit wallets built with that key can pass Keystone's own checks.
▪️ Entry point: a vulnerability in a third-party monitoring tool on Keystone's website, used by the attacker to escalate privileges.
▪️ What came out: some customer information and the key that confirms a device is genuine. Keystone says fake devices could be sold or shipped to buyers.
▪️ Why the old data is still out there: a 180-day deletion policy was supposed to wipe old records, but a bulk-erasure tool silently failed and kept them.
▪️ Checkout leak: the attacker also pulled 12,873 unfinished checkout records that Shopify was still holding. Keystone has asked Shopify to delete anything kept over 30 days.
▪️ Stock freeze: production shipments of every device using the compromised key are suspended. 18,835 devices in inventory will be destroyed, and shipments resume only after a new key is in place.
▪️ Who's safe: devices made and delivered before the Oct. 20 incident are considered safe. Anything delivered after that date can't be vouched for, so buyers are told to contact support for extra…
💬 «These devices could then be sold or shipped to customers, who might unknowingly use them as genuine products, potentially resulting in asset theft.» — Keystone
🔮Your cold storage is only as cold as the supply chain behind it. Who checks the checker?
@hivenetwork
Hardware wallet maker Keystone sold you a 'cold' box and a promise of authenticity, and now the promise is in a hacker's pocket. The attacker who breached its website last week took the key used to verify devices, plus 25,964 buyer records from 2024 to 2026, after first calling it just a customer data leak. Counterfeit wallets built with that key can pass Keystone's own checks.
▪️ Entry point: a vulnerability in a third-party monitoring tool on Keystone's website, used by the attacker to escalate privileges.
▪️ What came out: some customer information and the key that confirms a device is genuine. Keystone says fake devices could be sold or shipped to buyers.
▪️ Why the old data is still out there: a 180-day deletion policy was supposed to wipe old records, but a bulk-erasure tool silently failed and kept them.
▪️ Checkout leak: the attacker also pulled 12,873 unfinished checkout records that Shopify was still holding. Keystone has asked Shopify to delete anything kept over 30 days.
▪️ Stock freeze: production shipments of every device using the compromised key are suspended. 18,835 devices in inventory will be destroyed, and shipments resume only after a new key is in place.
▪️ Who's safe: devices made and delivered before the Oct. 20 incident are considered safe. Anything delivered after that date can't be vouched for, so buyers are told to contact support for extra…
If you bought a Keystone device after Oct. 20, treat its authenticity as unproven until support checks it, because a counterfeit unit with a seed phrase you type in is a direct route to your funds. The buyer list is now in criminal hands, and the 2020 Ledger leak of over a million addresses and phone numbers fed years of phishing, so expect the same wave here. This is also the sector's bad year: Trezor's shipping-partner breach grew past 80,000 users, SafePal exposed nearly 40,000 customers, BitBox got hit by phishing, and Coinkite's weak-entropy bug drained millions.
💬 «These devices could then be sold or shipped to customers, who might unknowingly use them as genuine products, potentially resulting in asset theft.» — Keystone
🔮
@hivenetwork
🐋 Fresh wallets dump $49M in SOL as price breaks under $100
Three brand-new Solana wallets have moved 482,228 SOL in three days, right as SOL slid below $100. About a third of the bag is already on exchanges, and nobody has claimed the addresses. Onchain analysts think it's one whale.
▪️ Oct. 23, evening: three never-used Solana addresses logged their first transactions within two minutes of each other. Arkham lists them as wallet A, B and C, no labels.
▪️ Method: split the coins across fresh addresses and feed them to the market in slices. Textbook way to limit slippage and keep order books from freaking out.
▪️ Lookonchain: 171,430 SOL (about $17.3M) already deposited to various exchanges. The selling is steady, not a dump-in-one-candle.
▪️ As of Oct. 27, 04:20 UTC, all three wallets were still sending transactions. Nobody has stopped.
▪️ Remaining balances: roughly 96,743, 97,639 and 97,312 SOL. Near-identical stacks look like one pre-planned split, not panic.
▪️ Backdrop: bitcoin hovers near $79,590, down almost 6% in a month, with most moving averages tilted bearish. High-beta SOL bleeds first.
📊 Still in the three wallets:
📊 Already sent to exchanges:
📊 SOL price now:
📊 Below Jan 2025 record of $293.31:
🔮Whale exit or whale with a plan? Three near-equal stacks sliced into exchanges is not how people panic.
@hivenetwork
Three brand-new Solana wallets have moved 482,228 SOL in three days, right as SOL slid below $100. About a third of the bag is already on exchanges, and nobody has claimed the addresses. Onchain analysts think it's one whale.
▪️ Oct. 23, evening: three never-used Solana addresses logged their first transactions within two minutes of each other. Arkham lists them as wallet A, B and C, no labels.
▪️ Method: split the coins across fresh addresses and feed them to the market in slices. Textbook way to limit slippage and keep order books from freaking out.
▪️ Lookonchain: 171,430 SOL (about $17.3M) already deposited to various exchanges. The selling is steady, not a dump-in-one-candle.
▪️ As of Oct. 27, 04:20 UTC, all three wallets were still sending transactions. Nobody has stopped.
▪️ Remaining balances: roughly 96,743, 97,639 and 97,312 SOL. Near-identical stacks look like one pre-planned split, not panic.
▪️ Backdrop: bitcoin hovers near $79,590, down almost 6% in a month, with most moving averages tilted bearish. High-beta SOL bleeds first.
📊 Still in the three wallets:
~291,700 SOL (~$29M)📊 Already sent to exchanges:
171,430 SOL (~$17.3M)📊 SOL price now:
$99.89📊 Below Jan 2025 record of $293.31:
66%If you're long SOL with stops parked under $100, that's exactly where the liquidity hunt happens. Manifold has the 'SOL closes above $100 on Oct. 31' market at 63%, down from the Oct. 20 open when SOL was near $104. By the pattern so far, the remaining ~$29M is the next slice headed for exchanges. Meanwhile, Bloom Trading lost nearly $1M when a breach drained 49 wallets belonging to nine users, and a Solana trading bot got hacked for almost $1M too. Fun week for anyone trusting a hot wallet.
🔮
@hivenetwork
🦆 Quack AI (Q): $0.05 to $0.24 and back to $0.06 in hours. Who was holding the duck?
Quack AI (Q) pumped from about $0.05 to a new all-time high near $0.24, pushing its market cap to almost $1B and into the top 100 coins. Then it gave back nearly every cent in a few hours, now trading around $0.06. Nobody can say what lit the fuse, and that's the part that should bother you.
▪️ What Q is: the native token of an AI governance layer for AI agents and dApps. Holders delegate votes, run gasless payments through the Q402 system and manage governance across multiple chains.
▪️ No big announcement before the spike. It came after weeks of gradual interest in AI agents, and no obvious signal said a move this size was coming.
▪️ Lookonchain tracked trader 0xF1fE, who made almost $1M mainly by opening longs while the price climbed. Smart money or inside info, pick your flavor.
▪️ Crypto with Haris ₿ says he made over $17,000 by shorting what he called 'the perfect top'. Good call, but he was the exception.
▪️ The crowd was on the wrong side: 70% of accounts on Binance were betting on a drop while open interest ballooned from $10M to $42M. Shorts piling in is exactly the fuel a squeeze needs.
▪️ OxNox flagged 48 wallets holding 55% of Q on BNB Chain. Through the entire run they made zero transactions, which means they didn't sell a single token on the way up.
📊 Open interest peak:
📊 Trader 0xF1fE profit:
💬 «pure leverage theater» — Nura
🔮Insiders who knew, or just a leverage casino with a duck mascot? Those 48 silent wallets will answer it.
@hivenetwork
Quack AI (Q) pumped from about $0.05 to a new all-time high near $0.24, pushing its market cap to almost $1B and into the top 100 coins. Then it gave back nearly every cent in a few hours, now trading around $0.06. Nobody can say what lit the fuse, and that's the part that should bother you.
▪️ What Q is: the native token of an AI governance layer for AI agents and dApps. Holders delegate votes, run gasless payments through the Q402 system and manage governance across multiple chains.
▪️ No big announcement before the spike. It came after weeks of gradual interest in AI agents, and no obvious signal said a move this size was coming.
▪️ Lookonchain tracked trader 0xF1fE, who made almost $1M mainly by opening longs while the price climbed. Smart money or inside info, pick your flavor.
▪️ Crypto with Haris ₿ says he made over $17,000 by shorting what he called 'the perfect top'. Good call, but he was the exception.
▪️ The crowd was on the wrong side: 70% of accounts on Binance were betting on a drop while open interest ballooned from $10M to $42M. Shorts piling in is exactly the fuel a squeeze needs.
▪️ OxNox flagged 48 wallets holding 55% of Q on BNB Chain. Through the entire run they made zero transactions, which means they didn't sell a single token on the way up.
📊 Open interest peak:
$42M📊 Trader 0xF1fE profit:
almost $1MIf you bought the top chasing the duck, you're the exit liquidity now. The 48 wallets sitting on 55% of supply haven't moved yet, and that's the next question: whoever controls that float decides when the next leg happens, and retail is the only side without a map. Nura says the volume is largely wash trading, which means part of the chart was never real demand to begin with.
💬 «pure leverage theater» — Nura
🔮
@hivenetwork
📊 Green board, thin books: BTC and ETH up, the real action is in pumps and dumps
BTC is at $80,944 (+1.46% in 24h) and ETH at $2,354 (+1.75%), so the majors are drifting up quietly. The real action is in small caps, where a few wallets and a few pumps are doing all the talking.
▪️ HAEDAL +26.2% on just $20M volume. A move that size on that little liquidity is a thin book, and thin books are where someone's exit lives.
▪️ SOXLB +13.9% on $56M and PEPE +10.4% on $57M. Same old rotation into memes, same old script.
▪️ ZEC +7.3% on $168M is the only mover with real size behind it. The rest is pocket change dressed up as a rally.
▪️ NIL -6.2% on $25M is the day's bleeder. ENA -1.2%, WLD flat on $21M. Nobody is celebrating there.
▪️ Solana: three fresh wallets moved 482,228 SOL (~$49.17M) over three days. About a third already hit exchanges, the wallets are unclaimed, and SOL dipped under $100.
▪️ Quack AI (Q) ran from ~$0.05 to an ATH near $0.24, about $1B market cap, then gave back almost all of it. Whales who knew in advance is the open question.
📊 Fear & Greed (yesterday 48):
🔮Green board, thin books, unclaimed wallets. Who's buying this, and who's selling it to them?
@hivenetwork
BTC is at $80,944 (+1.46% in 24h) and ETH at $2,354 (+1.75%), so the majors are drifting up quietly. The real action is in small caps, where a few wallets and a few pumps are doing all the talking.
▪️ HAEDAL +26.2% on just $20M volume. A move that size on that little liquidity is a thin book, and thin books are where someone's exit lives.
▪️ SOXLB +13.9% on $56M and PEPE +10.4% on $57M. Same old rotation into memes, same old script.
▪️ ZEC +7.3% on $168M is the only mover with real size behind it. The rest is pocket change dressed up as a rally.
▪️ NIL -6.2% on $25M is the day's bleeder. ENA -1.2%, WLD flat on $21M. Nobody is celebrating there.
▪️ Solana: three fresh wallets moved 482,228 SOL (~$49.17M) over three days. About a third already hit exchanges, the wallets are unclaimed, and SOL dipped under $100.
▪️ Quack AI (Q) ran from ~$0.05 to an ATH near $0.24, about $1B market cap, then gave back almost all of it. Whales who knew in advance is the open question.
📊 Fear & Greed (yesterday 48):
51 (Neutral)A 51 reading means nobody is panicking and nobody is euphoric, which is exactly when small-cap pumps get sold into. The market hasn't picked a side yet, so today is about who is holding the bags when volume shows up. Watch whether those Solana wallets keep feeding exchanges and whether SOL stays under $100.
🔮
@hivenetwork
🐋 Hedge funds ditched 68,000 BTC of Bitcoin ETFs while sovereign funds bought the dip
Galaxy Research says nine hedge funds and banks (Millennium, Goldman Sachs, Tudor and six others) cut about $5.4B of spot Bitcoin ETF exposure. Morgan Stanley's wealth arm, Abu Dhabi's Mubadala and the Abu Dhabi Investment Council were on the other side, buying. The sellers weren't dumping Bitcoin. They were unwinding a trade that stopped paying.
▪️ The trade: buy spot ETF shares, short CME Bitcoin futures, pocket the gap between them (the basis). Free money, until it isn't.
▪️ The basis averaged 7.9% annualized in the 30 days before the all-time high. In the 30 days to Oct. 21 it averaged 4.8%, barely above T-bills.
▪️ After fees, rolling costs and margin, the trade now nets about 1.5 points over cash. The desks did the math and walked.
▪️ Asset managers' net long on CME fell from 43,300 BTC to 18,400 BTC, and leveraged funds' net short shrank by the same proportion. Open interest is down 28% in BTC terms.
▪️ Advisers, family offices and individuals who don't file 13Fs cut holdings by just 6.6% while the price fell 49%.
▪️ Since the June low, the ETFs have been net buyers, which Galaxy calls directional buying, not carry.
📊 Basis over T-bills, 30 days to Oct. 21:
📊 13F holdings, Sep 2025 to Jun 2026:
📊 Added since June low:
💬 «That arithmetic, not the price, is why the multi-strategy desks left.» — Alex Thorn
🔮Smart money didn't stop loving Bitcoin. The free carry just ran out. So who's the hamster now?
@hivenetwork
Galaxy Research says nine hedge funds and banks (Millennium, Goldman Sachs, Tudor and six others) cut about $5.4B of spot Bitcoin ETF exposure. Morgan Stanley's wealth arm, Abu Dhabi's Mubadala and the Abu Dhabi Investment Council were on the other side, buying. The sellers weren't dumping Bitcoin. They were unwinding a trade that stopped paying.
▪️ The trade: buy spot ETF shares, short CME Bitcoin futures, pocket the gap between them (the basis). Free money, until it isn't.
▪️ The basis averaged 7.9% annualized in the 30 days before the all-time high. In the 30 days to Oct. 21 it averaged 4.8%, barely above T-bills.
▪️ After fees, rolling costs and margin, the trade now nets about 1.5 points over cash. The desks did the math and walked.
▪️ Asset managers' net long on CME fell from 43,300 BTC to 18,400 BTC, and leveraged funds' net short shrank by the same proportion. Open interest is down 28% in BTC terms.
▪️ Advisers, family offices and individuals who don't file 13Fs cut holdings by just 6.6% while the price fell 49%.
▪️ Since the June low, the ETFs have been net buyers, which Galaxy calls directional buying, not carry.
📊 Basis over T-bills, 30 days to Oct. 21:
0.6 pts📊 13F holdings, Sep 2025 to Jun 2026:
355k to 307k BTC📊 Added since June low:
87,000 BTCTranslation: nobody got scared of Bitcoin, the free lunch just ran out. The desks that lived off the basis unwound, and the people stepping in are sovereign money and wealth platforms with no reason to flip next week. Galaxy's warning is the part to remember: in December 2022 the basis inverted to minus 31% annualized, so this carry was never free money, just a bet that the gap stays open. The further-out futures pay about 2 points over bills before costs, which Thorn says doesn't pay for that tail.
💬 «That arithmetic, not the price, is why the multi-strategy desks left.» — Alex Thorn
🔮
@hivenetwork
☀️ Nothing's breaking: majors drift lower and the crowd is sitting on its hands
Bitcoin is at $80,467.5 (-0.63% in 24h), Ether at $2,333.12 (-0.94%). The majors are drifting, not crashing, and that's exactly when lazy money gets sloppy.
▪️ INIT +16.0% on just $23M volume: top gainer, but thin volume means it can unwind fast.
▪️ PEPE +7.7% on $109M: the real money in the gainers, meme chasing at scale.
▪️ GOOGLB -9.5% on $39M is the worst loser; ZEC -4.6% on $174M had the most volume of any loser, so that's where the selling actually happened.
▪️ Galaxy Research: nine hedge funds and banks cut 68,000 BTC of spot ETF exposure as cash-and-carry dried up. Sovereign funds and wealth platforms bought.
▪️ DekaBank bought $15.2 million of Strategy shares, traditional finance hunting indirect Bitcoin exposure.
▪️ Singapore police: users lost $2.7M after Ledger wallets were tampered with. At least two cases were reported as early as Sept. 10, almost a month before it went public.
🔮Neutral 51 while hedge funds dump 68,000 BTC of ETF exposure. Who is buying the calm you're trading?
@hivenetwork
Bitcoin is at $80,467.5 (-0.63% in 24h), Ether at $2,333.12 (-0.94%). The majors are drifting, not crashing, and that's exactly when lazy money gets sloppy.
▪️ INIT +16.0% on just $23M volume: top gainer, but thin volume means it can unwind fast.
▪️ PEPE +7.7% on $109M: the real money in the gainers, meme chasing at scale.
▪️ GOOGLB -9.5% on $39M is the worst loser; ZEC -4.6% on $174M had the most volume of any loser, so that's where the selling actually happened.
▪️ Galaxy Research: nine hedge funds and banks cut 68,000 BTC of spot ETF exposure as cash-and-carry dried up. Sovereign funds and wealth platforms bought.
▪️ DekaBank bought $15.2 million of Strategy shares, traditional finance hunting indirect Bitcoin exposure.
▪️ Singapore police: users lost $2.7M after Ledger wallets were tampered with. At least two cases were reported as early as Sept. 10, almost a month before it went public.
Fear & Greed is at 51 (Neutral), same as yesterday. No panic to buy, no euphoria to top-tick, so today is chop, and chop is where the stop hunts happen. Hardware wallet users in Singapore should check their devices before they touch anything.
🔮
@hivenetwork
🔐 Cold wallet with a warm spy inside: Singapore users robbed via tampered Ledgers
Singapore police say users lost S$3.5M (about $2.7M) after Ledger hardware wallets bought from local retailers were tampered with. The first reports date back to Sept. 10, almost a month before the story went public on Oct. 9. So much for 'not your keys, not your coins': the box you bought the keys in can be the problem.
▪️ Police advisory, published Wednesday: preliminary probes found malicious hardware components inside Ledger wallets bought from some retail stores in Singapore.
▪️ First public signal on Oct. 9: losses tied to devices sold through CryptoBilis, an authorized Ledger reseller in Indonesia, Malaysia and the Philippines.
▪️ Former Mt. Gox CEO Mark Karpelès said a Ledger Flex bought at Singapore's airport contained a spy implant.
▪️ Another user said his device from local IT retailer Challenger was tampered with. Ledger later sent him a new one.
▪️ On Oct. 13 Ledger asked retailers in seven countries to suspend sales while investigations run: Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong.
▪️ Ledger is reviewing the affected cases. Police say their investigation is ongoing and they are in contact with Ledger.
📊 Combined losses, Singapore police:
📊 Earliest reported case:
📊 Countries with sales suspended:
🔮Who bought the cheap spy-chipped units, who got the replacements, and why did the warnings sit for a month?
@hivenetwork
Singapore police say users lost S$3.5M (about $2.7M) after Ledger hardware wallets bought from local retailers were tampered with. The first reports date back to Sept. 10, almost a month before the story went public on Oct. 9. So much for 'not your keys, not your coins': the box you bought the keys in can be the problem.
▪️ Police advisory, published Wednesday: preliminary probes found malicious hardware components inside Ledger wallets bought from some retail stores in Singapore.
▪️ First public signal on Oct. 9: losses tied to devices sold through CryptoBilis, an authorized Ledger reseller in Indonesia, Malaysia and the Philippines.
▪️ Former Mt. Gox CEO Mark Karpelès said a Ledger Flex bought at Singapore's airport contained a spy implant.
▪️ Another user said his device from local IT retailer Challenger was tampered with. Ledger later sent him a new one.
▪️ On Oct. 13 Ledger asked retailers in seven countries to suspend sales while investigations run: Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong.
▪️ Ledger is reviewing the affected cases. Police say their investigation is ongoing and they are in contact with Ledger.
📊 Combined losses, Singapore police:
S$3.5M📊 Earliest reported case:
Sept. 10📊 Countries with sales suspended:
7If you hold a Ledger or know someone who bought one through a retailer in those seven countries, the box is now a suspect, not a guarantee. Ledger is reviewing the cases, police are still digging, and the company's handling of the early implant warnings is already being questioned, as Karpelès put it. Expect more victim reports to surface as the review and the probe widen.
🔮
@hivenetwork
🚀 HYPE pumps 13% on an ICE deal with no launch date and no approvals
HYPE jumped to roughly $91 on Thursday after Intercontinental Exchange, the owner of the NYSE, signed a deal to bring Hyperliquid-based perpetual futures to the United States. The product that's supposed to be sold to Americans can't be traded by them yet: there's no launch date and it still needs regulatory approvals. The market priced it in anyway.
▪️ The deal: ICE becomes the exclusive operator of Trade[XYZ]'s regulated markets and takes a strategic stake in the company.
▪️ Trade[XYZ] already runs 24/7 perpetuals on stocks, equity indices, commodities and currencies for users outside the US, with Hyperliquid as the infrastructure.
▪️ Perps have no expiry and let you trade with borrowed money, so every pump on this product comes with leverage stacked on top.
▪️ ICE will build a dedicated retail market and clearing structure, distributed through its OKX joint venture, where OKX's own approvals are still pending.
▪️ US plumbing: verified customers connect through futures commission merchants, and identity checks under KYC and AML rules are mandatory.
▪️ Price path: opened at $80.69, spiked to $92.10 on KuCoin, and is still about 7% under the September record near $98.
📊 HYPE market cap:
📊 ICE's valuation of OKX when it bought in (March):
💬 «I am excited to be an investor in trade(xyz) as they partner with ICE to bring 24/7 perpetual futures on Hyperliquid to the United States.» — Stan Druckenmiller
🔮When retail finally gets access, who's buying the top: new traders or the ones who bought the headline?
@hivenetwork
HYPE jumped to roughly $91 on Thursday after Intercontinental Exchange, the owner of the NYSE, signed a deal to bring Hyperliquid-based perpetual futures to the United States. The product that's supposed to be sold to Americans can't be traded by them yet: there's no launch date and it still needs regulatory approvals. The market priced it in anyway.
▪️ The deal: ICE becomes the exclusive operator of Trade[XYZ]'s regulated markets and takes a strategic stake in the company.
▪️ Trade[XYZ] already runs 24/7 perpetuals on stocks, equity indices, commodities and currencies for users outside the US, with Hyperliquid as the infrastructure.
▪️ Perps have no expiry and let you trade with borrowed money, so every pump on this product comes with leverage stacked on top.
▪️ ICE will build a dedicated retail market and clearing structure, distributed through its OKX joint venture, where OKX's own approvals are still pending.
▪️ US plumbing: verified customers connect through futures commission merchants, and identity checks under KYC and AML rules are mandatory.
▪️ Price path: opened at $80.69, spiked to $92.10 on KuCoin, and is still about 7% under the September record near $98.
📊 HYPE market cap:
$22.4B📊 ICE's valuation of OKX when it bought in (March):
$25BRetail is the new business here: ICE says over 99% of its participation today is institutional, so you're the market they just discovered. Hyperliquid is still geofenced for Americans, and Trump said in August the CFTC was working on letting it operate legally in the US. The token priced in a US product nobody can trade yet, which is exactly how these headline pumps usually go.
💬 «I am excited to be an investor in trade(xyz) as they partner with ICE to bring 24/7 perpetual futures on Hyperliquid to the United States.» — Stan Druckenmiller
🔮
@hivenetwork
🚨 Binance suspected hack: $5.57B out, Tether and Circle hit the freeze button
On-chain trackers put a suspected outflow from Binance at about $5.57 billion across three blockchains, and Binance says it is investigating a potential security breach. Tether and Circle have frozen stablecoins to stop the money from walking, and the hunt for the wallet is already on.
▪️ The $5.57B is an on-chain tally, not a Binance statement. Binance confirmed only that it is investigating a potential security breach.
▪️ Binance's founder says the suspected hack appears safe for user funds. Check your own balance and read the fine print of that word 'appears'.
▪️ BitGo froze USD1 at an address linked to the stolen funds, so the suspected hacker's stablecoins are now stuck.
▪️ Aave froze its Avalanche lending markets to block the suspected Binance hacker from borrowing against what they took.
▪️ The suspected hacker's wallet holds a big UNI position, and other top altcoin positions are surfacing in the same wallet.
▪️ BNB dropped as much as 9% on the reports, and Ethena says its collateral sits off-exchange, not on Binance.
📊 Suspected outflow, three chains:
📊 Stablecoins frozen by Tether and Circle:
📊 Tether freeze range reported:
📊 Reported leaving Binance wallets:
🔮Exchange says user funds look safe. Funny how 'appears safe' always comes right after a multi-billion bleed.
@hivenetwork
On-chain trackers put a suspected outflow from Binance at about $5.57 billion across three blockchains, and Binance says it is investigating a potential security breach. Tether and Circle have frozen stablecoins to stop the money from walking, and the hunt for the wallet is already on.
▪️ The $5.57B is an on-chain tally, not a Binance statement. Binance confirmed only that it is investigating a potential security breach.
▪️ Binance's founder says the suspected hack appears safe for user funds. Check your own balance and read the fine print of that word 'appears'.
▪️ BitGo froze USD1 at an address linked to the stolen funds, so the suspected hacker's stablecoins are now stuck.
▪️ Aave froze its Avalanche lending markets to block the suspected Binance hacker from borrowing against what they took.
▪️ The suspected hacker's wallet holds a big UNI position, and other top altcoin positions are surfacing in the same wallet.
▪️ BNB dropped as much as 9% on the reports, and Ethena says its collateral sits off-exchange, not on Binance.
📊 Suspected outflow, three chains:
$5.57B📊 Stablecoins frozen by Tether and Circle:
~$1.8B📊 Tether freeze range reported:
$971M to $1.567B📊 Reported leaving Binance wallets:
$2.77BLook at the freeze list, because that is the real story. Tether, Circle and BitGo can lock a wallet's stablecoins with one click, so the 'decentralized' money on your screen has an issuer kill switch attached. Aave freezing its Avalanche markets shows DeFi is not immune either. The sources do not say how the breach happened, so there is no attack vector to trade on yet. Anyone parking funds on an exchange should be asking the same question Ethena's answer hints at: where does my collateral actually sit?
🔮
@hivenetwork